This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json) Hash identifier: Ip1JRaTmkAYyQUD4zKlPrJDpQejsIleHgakwHFLFf3E= Subject key identifier: B1:C9:2C:BB:00:9C:7B:65:53:FC:20:8F:E7:C6:E8:2E:6D:EB:1C:06 Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Certificate serial: 1533FD7F70D25FFC9DDFA91AAA6B00A6D6DEE597 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 06:15:57 +0000 Manifest this update: Sun 25 Jan 2026 06:10:57 +0000 Manifest next update: Mon 26 Jan 2026 08:42:57 +0000 Files and hashes: 1: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=) 2: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=) 3: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=) 4: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=) 5: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=) 6: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: 16O/h3BlW74uqTGB1z7aPiIHaVVJ2xQOg2xs/BYtryE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:33:fd:7f:70:d2:5f:fc:9d:df:a9:1a:aa:6b:00:a6:d6:de:e5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Validity Not Before: Jan 25 06:10:57 2026 GMT Not After : Jan 26 08:42:57 2026 GMT Subject: CN=B1C92CBB009C7B6553FC208FE7C6E82E6DEB1C06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:e6:f5:b9:0e:e2:b2:ed:52:a8:39:57:82: c0:3a:20:8e:97:42:e1:36:bc:be:b7:b8:32:75:09: 9c:6d:72:54:e6:e1:b7:ba:cd:a6:e7:08:d7:cf:0b: 28:d0:aa:3f:b3:96:5a:47:98:fd:07:c3:82:ff:01: b7:f8:73:e9:2a:62:8d:f1:80:26:24:26:77:88:00: ef:1b:e9:17:bb:8f:9b:09:92:0c:19:69:77:48:79: 8f:be:0a:2c:ba:e2:b8:7f:f6:c4:8b:50:72:b5:ad: ea:ec:f9:40:7a:b3:7b:5c:8f:9a:eb:d4:ec:55:91: 66:04:1f:d7:f7:a2:6f:99:1a:3b:e7:85:15:96:b9: 51:e7:f3:0e:98:df:05:04:27:96:58:07:b3:b4:8a: 0f:55:ed:f2:be:3a:bf:43:b1:22:b7:dc:6e:1b:e9: 64:be:e1:f8:bf:96:56:77:14:a2:04:bf:96:3d:a9: f6:6d:57:a8:24:4e:c5:a4:c3:fe:29:0b:c5:72:39: 6f:19:8b:c0:f3:e3:06:a6:35:db:99:29:5e:07:de: c5:eb:fd:9a:18:a6:de:a6:88:7e:91:9e:67:8b:7a: fb:bb:d7:80:dc:06:f7:c1:58:49:e4:8e:1b:8a:f0: 91:f7:93:a3:de:44:e8:67:86:1c:39:27:56:04:4c: a9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C9:2C:BB:00:9C:7B:65:53:FC:20:8F:E7:C6:E8:2E:6D:EB:1C:06 X509v3 Authority Key Identifier: keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a8:1b:e5:ca:d1:f8:38:4a:40:71:82:8e:01:cf:ac:ba:8f: 62:52:88:9b:20:51:14:a2:4e:77:4e:4b:80:99:7f:0d:05:f0: f6:e9:ce:7c:ac:59:51:2e:11:de:15:04:1f:08:69:ea:11:34: cb:eb:5d:53:15:54:fa:e1:79:2c:86:19:0e:24:3e:49:96:e0: 55:00:2b:38:38:dd:01:9b:7a:df:07:0a:ce:17:5c:0f:17:52: 8b:bb:f2:47:c9:15:2b:91:57:23:ea:df:08:90:81:eb:19:67: ce:80:ab:1f:47:98:e8:39:fd:8b:52:26:b9:bf:8d:0c:c1:f0: 69:96:56:69:35:17:51:88:4c:7d:07:6a:36:2f:03:06:53:53: 67:98:47:29:39:83:cf:8e:46:1b:2d:c8:2d:46:47:75:1f:f7: 91:9d:f5:e7:7f:0d:26:ef:79:ee:e9:39:16:3f:39:f4:56:6d: 63:e2:db:34:6a:69:1e:c2:f3:12:7e:6b:e2:7e:4c:53:be:40: 58:26:65:ce:0d:96:a0:64:6f:00:5d:be:ab:eb:f5:94:20:2c: f5:ef:23:b7:b6:10:39:41:77:5d:84:39:df:4c:42:0c:ec:2d: e5:88:42:80:4d:7e:44:23:47:c8:ef:6c:1d:5e:3b:5d:21:8a: 61:60:82:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFTP9f3DSX/yd36kaqmsAptbe5ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD MTExMkVENTAeFw0yNjAxMjUwNjEwNTdaFw0yNjAxMjYwODQyNTdaMDMxMTAvBgNV BAMTKEIxQzkyQ0JCMDA5QzdCNjU1M0ZDMjA4RkU3QzZFODJFNkRFQjFDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDa+b1uQ7isu1SqDlXgsA6II6X QuE2vL63uDJ1CZxtclTm4be6zabnCNfPCyjQqj+zllpHmP0Hw4L/Abf4c+kqYo3x gCYkJneIAO8b6Re7j5sJkgwZaXdIeY++Ciy64rh/9sSLUHK1rers+UB6s3tcj5rr 1OxVkWYEH9f3om+ZGjvnhRWWuVHn8w6Y3wUEJ5ZYB7O0ig9V7fK+Or9DsSK33G4b 6WS+4fi/llZ3FKIEv5Y9qfZtV6gkTsWkw/4pC8VyOW8Zi8Dz4wamNduZKV4H3sXr /ZoYpt6miH6RnmeLevu714DcBvfBWEnkjhuK8JH3k6PeROhnhhw5J1YETKmZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUscksuwCce2VT/CCP58boLm3rHAYwHwYDVR0j BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2 NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgzNTM1MzgvMC8xQTVEOTNDMkIyMUMz OTBEMDU0ODcyQjU0N0VGNjcxQkMxMTEyRUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKgb5crR+DhK QHGCjgHPrLqPYlKImyBRFKJOd05LgJl/DQXw9unOfKxZUS4R3hUEHwhp6hE0y+td UxVU+uF5LIYZDiQ+SZbgVQArODjdAZt63wcKzhdcDxdSi7vyR8kVK5FXI+rfCJCB 6xlnzoCrH0eY6Dn9i1Imub+NDMHwaZZWaTUXUYhMfQdqNi8DBlNTZ5hHKTmDz45G Gy3ILUZHdR/3kZ31538NJu957uk5Fj859FZtY+LbNGppHsLzEn5r4n5MU75AWCZl zg2WoGRvAF2+q+v1lCAs9e8jt7YQOUF3XYQ530xCDOwt5YhCgE1+RCNHyO9sHV47 XSGKYWCCFg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:44 2026 by rpki-client